u9login Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is published by u9login ("u9login", "we", "us", "our"), the operator of the online gaming platform accessible at u9login.club. We are committed to protecting the privacy and security of all personal data entrusted to us by our members and website visitors.

This Policy sets out in detail what personal data we collect, the purposes for which we process it, the legal bases on which we rely, how we protect it, and the rights you hold in relation to that data. If you are a Malaysian resident, this Policy applies to all personal data you provide to u9login whether through the registration process, account usage, payment transactions, or communications with our support team.

For the purposes of this Policy, "personal data" means any information that identifies you as an individual or that could reasonably be used to identify you, either alone or in combination with other information held by u9login.

2. Personal Data We Collect

u9login collects personal data through several channels, including account registration, ongoing account use, payment processing, and communications with the support team. The categories of personal data we collect include:

u9login does not intentionally collect special category data (such as racial or ethnic origin, health data, or political opinions) and requests that members refrain from including such information in any communications with the platform.

3. How We Use Your Personal Data

u9login processes your personal data for the following purposes:

• Account management: To register and maintain your u9login account, verify your identity, and administer your membership;
• Service delivery: To provide access to the gaming platform, process deposits and withdrawals, award bonuses, and deliver promotional offers you are eligible for;
• KYC and compliance: To verify your age (21+), identity, and source of funds in compliance with applicable anti-money laundering (AML) and Know Your Customer (KYC) requirements;
• Fraud prevention and security: To detect and prevent fraudulent activity, account takeovers, money laundering, and other prohibited conduct;
• Responsible gaming: To monitor gaming patterns and identify members who may benefit from responsible gaming tools or support;
• Customer support: To respond to enquiries, resolve disputes, and maintain records of support interactions;
• Platform improvement: To analyse usage patterns and technical performance in order to improve the u9login platform;
• Marketing communications: To send promotional offers, bonus notifications, and platform updates where you have consented to receive such communications.

u9login will not use your personal data for any purpose materially different from those listed above without providing prior notice and, where required, obtaining your consent.

4. Legal Basis for Processing

u9login processes personal data on the following legal bases, consistent with internationally recognised data protection principles:

• Contractual necessity: Processing required to fulfil our obligations under the Member Agreement, including account management, payment processing, and service delivery;
• Legal obligation: Processing required to comply with applicable KYC, AML, and gaming authority obligations;
• Legitimate interests: Processing for fraud prevention, platform security, and improving the quality of our services, provided such interests are not overridden by your privacy rights;
• Consent: Processing for marketing communications and non-essential analytics cookies, where you have provided specific, informed consent that you may withdraw at any time.

5. Cookies and Tracking Technologies

The u9login platform uses cookies and similar tracking technologies to ensure proper platform functionality, maintain session state, and analyse usage patterns. Cookies used by u9login fall into the following categories:

• Strictly necessary cookies: Required for the platform to function correctly — including login session management, language preferences, and security tokens. These cannot be disabled without affecting platform functionality;
• Analytics cookies: Used to understand how members use the platform — including pages visited, session duration, and device type — in aggregate and anonymised form. This helps us improve the u9login experience;
• Functional cookies: Used to remember your preferences, such as display settings and responsible gaming tool configurations.

u9login does not use advertising cookies, cross-site tracking pixels, or third-party behavioural targeting tools. You can manage or delete cookies through your browser settings. Note that disabling strictly necessary cookies may affect your ability to access certain features of the u9login platform.

6. Sharing of Personal Data

u9login does not sell, rent, or trade your personal data. We may share your personal data with the following categories of recipients strictly on a need-to-know basis:

• Payment processors: Malaysian payment service providers (including FPX operators, Touch 'n Go, Boost, and bank transfer networks) to process deposits and withdrawals on your behalf;
• Identity verification providers: Third-party KYC service providers engaged to verify the authenticity of identification documents submitted by members;
• Gaming software providers: Game studios that provide the casino and sportsbook software receive anonymised session data necessary to deliver game functionality — they do not receive personally identifiable information;
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or gaming regulatory authority directive, u9login may disclose personal data to the relevant authorities;
• Responsible gaming organisations: In cases where a self-exclusion or intervention is required, relevant data may be shared with accredited responsible gaming bodies.

All third parties with whom u9login shares personal data are subject to contractual data protection obligations consistent with this Policy.

7. Data Retention

u9login retains personal data for as long as is necessary to fulfil the purposes set out in this Policy, including:

• For active accounts: for the duration of the membership and for a period of at least 5 years following account closure, to satisfy AML and gaming regulatory retention requirements;
• For KYC documentation: for a minimum of 5 years from the date of verification, consistent with applicable financial record-keeping obligations;
• For transaction records: for a minimum of 7 years following the date of the transaction;
• For support communications: for a period of 2 years from the date of the interaction, unless the subject matter is connected to an ongoing dispute.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Where anonymisation is applied, the resulting data no longer constitutes personal data and may be retained for statistical or analytical purposes.

8. Data Security

u9login implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the u9login platform;
• Encryption of sensitive data at rest, including identity documents and financial records;
• Role-based access controls restricting access to personal data to authorised personnel only;
• Regular security audits and penetration testing of platform infrastructure;
• Multi-factor authentication requirements for administrative access to data systems;
• Incident response procedures to identify, contain, and notify affected parties of any data security incident.

While u9login employs rigorous security measures, no transmission over the internet or electronic storage system is completely secure. Members are encouraged to use strong, unique passwords for their u9login accounts and to enable two-factor authentication where available.

9. Your Data Protection Rights

As a member of u9login, you hold the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data u9login holds about you at any time;
• Right of rectification: You may request correction of any inaccurate or incomplete personal data held about you;
• Right of erasure: You may request deletion of your personal data, subject to our legal retention obligations;
• Right to restrict processing: You may request that u9login restrict processing of your personal data in certain circumstances;
• Right to data portability: You may request a copy of your personal data in a structured, machine-readable format;
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing;
• Right to object: You may object to processing based on legitimate interests, including direct marketing.

To exercise any of the above rights, contact u9login support via live chat or at the support email address listed in Section 14. We will respond to all verified requests within 30 days. Requests must be submitted from the email address registered to your u9login account for verification purposes.

10. Children's Privacy

The u9login platform is strictly restricted to individuals aged 21 years and above. u9login does not knowingly collect or process personal data belonging to individuals under the age of 21. If we become aware that an account has been registered by a person under 21, the account will be immediately suspended, all deposited funds returned to the originating payment method following identity verification, and all associated personal data deleted except where retention is required by applicable law.

Parents and guardians who believe that a minor has registered an account with u9login should contact our support team immediately.

11. International Data Transfers

u9login's primary operations serve Malaysian users and the platform infrastructure is operated with a focus on the Southeast Asian region. Where personal data is transferred to or processed by service providers located outside Malaysia, u9login ensures that appropriate safeguards are in place, consistent with internationally recognised data transfer standards.

Such safeguards include standard contractual clauses, data processing agreements, and due diligence assessments of the data protection standards applicable in the recipient jurisdiction. u9login does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate compensating controls.

12. Third-Party Links

The u9login platform may contain references to third-party services, including payment providers and gaming software studios. This Policy applies only to data processed by u9login. u9login is not responsible for the privacy practices of any third-party services, and members are encouraged to review the privacy policies of any third-party platforms they interact with.

13. Changes to This Policy

u9login reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or platform functionality. Where material changes are made, u9login will provide reasonable notice via the platform or by email to the address registered on your account prior to the changes taking effect.

The "Last Updated" date at the top of this page indicates when the most recent revision was published. Continued use of the u9login platform following the effective date of any amendment constitutes acceptance of the revised Policy.

14. Contact and Data Enquiries

For any questions, requests, or concerns relating to this Privacy Policy or u9login's data processing practices, please contact our support team through any of the following channels:

• Email: [email protected] — responses within 1 business hour
• Live Chat: Available 24 hours a day, 7 days a week via the u9login platform — average response under 5 minutes

For data access or deletion requests, please identify your request clearly as a "Data Subject Request" when contacting support. Verification of your identity will be required before any personal data is disclosed or deleted.